CVE-2019-11248

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10 are affected. The issue is of medium severity, but not exposed by the default configuration.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Weakness enumeration

CWE-419 CWE-862

Affected software

Vendor	Product	Versions
Kubernetes	Kubernetes	prior to 1.12.10; prior to 1.13.8; prior to 1.14.4; 1.1; 1.2; 1.4; 1.5; 1.6; 1.7; 1.8; 1.9; 1.10; 1.11

References

https://github.com/kubernetes/kubernetes/issues/81023Patch, Third Party Advisory
https://groups.google.com/d/msg/kubernetes-security-announce/pKELclHIov8/BEDtRELACQAJMailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20190919-0003/Third Party Advisory
https://github.com/kubernetes/kubernetes/issues/81023Patch, Third Party Advisory
https://groups.google.com/d/msg/kubernetes-security-announce/pKELclHIov8/BEDtRELACQAJMailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20190919-0003/Third Party Advisory

Timeline

Published: Aug 29, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-112496.5The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar ins CVE-2019-11255.6An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who succ CVE-2019-112506.5The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized user CVE-2019-112515.7The Kubernetes kubectl cp command in versions 1.1-1.12, and versions prior to 1.13.11, 1.14.7, and 1.15.4 allows a combination of two symlin CVE-2019-112526.5The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs CVE-2019-112537.5Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 a CVE-2019-112546.5The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sen CVE-2019-112556.5Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external CVE-2019-11265.3A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an attacker to bypass the ex CVE-2019-112684.3Cloud Foundry UAA version prior to 73.3.0, contain endpoints that contains improper escaping. An authenticated malicious user with basic rea CVE-2019-112695.4Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsuppo CVE-2019-11278.8A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V